Insights

News

Our latest thinking on the issues that matter most in business and management.

Critical PHP Vulnerabilities: What Are the Risks for Businesses and How Should You Respond?

On 21 October 2026, updates were released for two critical vulnerabilities in PHP - a technology widely used for websites, online stores, and business applications. The vulnerabilities may expose companies to the risk of unauthorized access to systems and data, including where the maintenance of the relevant services has been outsourced. This alert summarizes the specific steps companies should verify with their IT teams and the legal obligations that may arise if an incident is identified.

The EmpCo Directive: Stricter Rules on Green Claims

ESG in Bulgaria after the Omnibus: A Lighter Reporting Landscape

Crypto is no longer invisible to the tax authorities

ECJ with new interpretations on the concept of ‘qualified electronic signature’ with reference to a Bulgarian case

At the end of October 2022, the European Court of Justice (ECJ) issued a curious new judgment (case C-362/21) on several issues relating to electronic signatures, and this was initiated upon request for a preliminary ruling from a Bulgarian court (Veliko Tarnovo Administrative Court).

DPC Shorts: Ivan Alexander Manev on taxes in real estate transactions

Taxes are definitely not the first thing we think of amidst the excitement surrounding the sale or acquisition of real estate. However, they represent a significant part of the transaction value and it is good to know in advance what tax payments are due and by whom. Tax law expert Ivan Alexander Manev explains in 2 minutes what taxes are due in the main types of real estate transactions. *This video is in Bulgarian.

Ivan Alexander Manev

Commentary on the Personal Insolvency Bill

On 6 October 2022 a public consultancy procedure on the Personal Insolvency Bill was opened.

Prof. Dr. George Dimitrov has been selected as an international arbitrator at the BIA Court of Arbitration

The newly founded panel includes four lawyers with a proven high level of professional expertise.

Prof. George Dimitrov, DSc

Bulgarian PDPC Adopted a List of Processing Operations Requiring Prior Consultation

Bulgarian PDPC has adopted a list of processing operations that require prior consultation which is addressed to the authorities subject to Directive (EU) 2016/680. This list does not directly apply to the activities of the controllers and processors subject to GDPR but provides an indication for operations which rise high risks and require DPIA and eventual prior consultation under GDPR as well.

Desislava Krusteva

A recap of the latest Labour Code amendments in force as of 1 August 2022

Some amendments to the Labour Code came into force on the 1 August. Radina Tomanova summarizes the most important of them.

Radina Tomanova

DPC won a case in favour of a medical facility on a request from an employee for additional remuneration for work in COVID-19 conditions

During the emergency epidemic situation, all medical facilities were directly affected economically by the measures against the epidemic, as because of the restrictions on some planned medical activities, the revenue from their activity was significantly reduced.

Covered bonds – a new opportunity or same old thing?

On 8 July 2022, the new Covered Bonds Act (“CBA”) entered into force, transposing the European Directive (EU) 2019/2162 on the issue of covered bonds and covered bond public supervision (the “Directive”), aimed at harmonising the legal regime for covered bonds in EU Member States.

Unprecedented compensation for nonpecuniary damages awarded to a client

Dimitrov, Petrov & Co. Law Firm (DPC) won a case for nonpecuniary damages with an unusually high amount of compensation for Bulgaria.

October 21, 2026

Critical PHP Vulnerabilities: What Are the Risks for Businesses and How Should You Respond?

On 21 October 2026, updates were released for two critical vulnerabilities in PHP - a technology widely used for websites, online stores, and business applications. The vulnerabilities may expose companies to the risk of unauthorized access to systems and data, including where the maintenance of the relevant services has been outsourced. This alert summarizes the specific steps companies should verify with their IT teams and the legal obligations that may arise if an incident is identified.

Desislava Krusteva

October 22, 2026

The EmpCo Directive: Stricter Rules on Green Claims

From 27 September 2026, public sustainability claims will face clearer and more targeted legal scrutiny. This is particularly relevant for companies operating in Bulgaria

Ana-Mari Eremieva

October 19, 2026

ESG in Bulgaria after the Omnibus: A Lighter Reporting Landscape

Тhe Omnibus has reduced mandatory ESG reporting obligations for most Bulgarian companies and mandatory reporting is now unlikely to apply for them

Ana-Mari Eremieva

October 14, 2026

When Algorithms Decide Who Gets to Work: Key GDPR Lessons from the Uber Fine

Uber’s record GDPR fine highlights the importance of transparency, human oversight and effective safeguards in automated decision-making

Prof. Martin Zahariev, PhD

EU AI Omnibus: A Practical Implementation Roadmap for Businesses

What businesses should do now

Prof. Martin Zahariev, PhD

September 1, 2026

Why Bulgaria may be one of the smartest routes into the EU crypto market

With the end of MiCA’s transitional period, Bulgaria is emerging as an attractive gateway to the EU crypto market by offering a clear regulatory framework, competitive tax and operating conditions, and a MiCA license that enables CASPs to passport their services across the entire European Economic Area

August 25, 2026

Crypto is no longer invisible to the tax authorities

DAC8 makes crypto transactions more transparent to EU tax authorities, requiring crypto service providers to report client transaction data while not introducing new tax obligations for crypto holders.

Ivan Alexander Manev

Bulgaria strengthens AML governance requirements for banks

The latest amendments to the Credit Institutions Act introduce important changes to the regulatory framework for banks, further integrating anti-money laundering and counter-terrorist financing requirements into prudential supervision

Tsvetelina Koleva

Working from home in Bulgaria: Permanent establishments in the age of remote work

The rise of remote and hybrid work has blurred not just the boundary between professional and personal life, but also the tax boundaries between countries. For foreign companies a deceptively simple arrangement such as a person at a laptop in a Sofia apartment, can have significant corporate tax consequences. With this article we would like to offer a brief overview of the issue, how Bulgarian tax authorities currently approach it, and where the law is heading.

Ivan Alexander Manev

February 26, 2018

Martin Zahariev, PHD, presented GDPR at a workshop under a European project

Martin Zahariev, PhD delivered a presentation at a workshop on privacy and education in the context of the so called “once-only” principle.

January 7, 2020

Desislava Krusteva gains recognition in the Women in Data 2019 survey

Global Data Review – the leading information source within the data law landscape – has recently released its new survey Women in Data 2019.

© All rights reserved 2007-2026 Dimitrov, Petrov & Co.

Design by StanVision